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Reply to Office Action dated May 17, 2004 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 
Listing of Claims : 

1 . (Currently Amended) A data transfer device, having a_first data interface 
means for exchanging data with a data processing system, a_second data interface means for 
exchanging data with a user of 3aid data transfer device, and a_control unit means for selectively 
enabling controlling data transfer between said first and second data interfaces in one of an open 
mode and a secure mode of operation, means-wherein said control means arc unit is configured 
for receiving control data associated with an application to be processed by said data processing 
system and for providing an authentication check on said control data for setting said data 
transfer device in either one of the open and the secure modes of operation from said first data 
interface means for selectively enabling data exchange between said first and second data 
interface means , 

2. (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is means are configured for processing data provided by said first and second 
data interfaces means in accordance with said control data. 

3. (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is m e ans arc configured for processing data provided by said first and second 
data interfaces in accordance with program execution data to be executed by said data processing 
system, wherein said program execution data is_bemg-comprised by said control data. 

4. (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is mcan3 arc configured for enabling part of said first and second data interfaces 
means for operation in an-the open mode. 
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5. (Cancelled) 

6. (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is mcan3 arc configured for enabling said second data interface means for 
operation in the a-secure mode and for executing program execution data if said data transfer 
device is set in the a-secure mode of operation. 

7. (Cancelled) 

8. (Currently Amended) A data transfer device according to claim 1, further 
comprising data storage means for storing certificate data, wherein said control data comprise 
certificate data, and said control data unit is means arc configured for checking said certificate 
data of said control data with respect to certificate data stored in said data storage means, for 
setting said data transfer device in the a-secure mode of operation if said certificate data of said 
control data are approved and for setting said data transfer device in the an-open mode of 
operation for either one of disapproval of said certificate data and non-availability of certificate 
data of said control data, and for deleting said control data if said certificate data thereof are 
false. 

9. (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is m eans arc configured for enabling part of said first and second data interfaces 
means for operation in an open mode, and wherein said control unit is means arc configured for 
enabling said second data interface means for operation in the a-secure mode, said second data 
interface comprises keypad means, data card reader means and display means, said control unit 
means in said open mode is are-configured for enabling access to said data card reader means, 
and said control unit means in said secure mode is are-configured for enabling access to said 
keypad means, data card reader means and display means. 



3 



Application No. 10/025,375 

Reply to Office Action dated May 1 7, 2004 

10. (Currently Amended) A data transfer device according to claim 9 wherein 
said control unit is means arc configured for processing data provided by said card reader means 
in accordance with said control data received. 

1 1 . (Currently Amended) A data transfer device according to claim 1 wherein 
said control unit is means arc configured for enabling part of said first and second data interfaces 
means for operation in the a n-open mode, and wherein said control unit is means are configured 
for enabling said second data interface means for operation in the a-secure mode, wherein said 
second data interface comprises Input/Output (I/O) means for data exchange with at least one 
peripheral device to be connected to said I/O means, and wherein said control unit means in said 
secure mode is are-configured for enabling access to said I/O means by said at least one 
peripheral device. 

12. (Original) A data transfer device according to claim 1 1 wherein said I/O 
means are configured for connecting at least one data communication device. 

13. (Original) A data transfer device according to claim 1 1 wherein said I/O 
means are configured for connecting at least one Voice over IP (VoIP) digital telephone device. 

14. (Currently Amended) A data transfer device according to any of the 
claims 1 wherein said control unit is mean3 are configured for enabling part of said first and 
second data interfaces means for operation in an open mode, and wherein said control unit is 
means arc configured for enabling said second data interface means for operation in the a-secure 
mode, further comprising signaling means for signaling said mode of operation of said data 
transfer device. 

15. (Currently Amended) A data transfer device according to claim 14 
wherein said signaling means comprise a Light Emitting Diode (LED), and said control unit is 
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mcan3 arc arranged for illuminating said LED if said data transfer device is in its secure mode of 
operation. 

16. (Currently Amended) A data transfer device according to claim 1, further 
comprising means for supporting encrypted data transfer via said first interfac e means . 

17. (Currently Amended) A data transfer device according to claim 1 wherein 
said first data interface means-comprises ^standardized computer data interfac e means , such as 
USB (Universal Serial Bus) interfac e mcan3 . 

18. (Currently Amended) A transaction system, comprising a first processing 
device such as to be operated by an authorization entity, a second processing device such as to be 
operated by a user, and a data transfer device having a_first data interface to means for 
exchangemg data with a data processing system, a_second data interface to mcan3 for 
exchangemg data with a user of 3aid data transfer device, and a^control unit to means for 
controlling data transfer between said first and the-second data interfaces in one of an open mode 
and a secure mode of operation ffieans, wherein said first and second processing devices connect 
to a data network, said data transfer device with its first interface means-connects to said second 
processing device, and said first and second processing devices being configured to for 
exchangemg control data , associated with an application to be processed by said data processing 
system, from said first processing device to said data transfer devic e for selectively enabling said 
second data interface means of said data transfer device , wherein said first processing device is 
configured to provide the control data to set said data transfer device in the secure mode or the 
open mode based on an authentication check performed on the control data by the control unit . 

19. (Cancelled) 

20. (Currently Amended) A transaction system, according to claim 18, further 
comprising a third processing device such as to be operated by a transaction entity, wherein said 
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third processing device connects to said data network, and said first processing device being 
configured to fer-enablemg a transaction between said second and third processing devices 
dependent on said-enabling of said second data interface mean s of said data transfer device. 

21. (Currently Amended) A transaction system according to claim 20 wherein 
said transaction between said second and third processing devices involves exchange of trusted 
data between said first and second processing devices, wherein said first processing device is 
configured to fe^provideiftg control data to fei^setttftg said data transfer device in the a-secure 
mode of operation and wherein said third processing device is configured to_fef^enablemg said 
transaction between said second and third processing devices after said trusted data have been 
successfully exchanged. 

22. (Currently Amended) A transaction system according to claim 20 wherein 
said second data interface comprises Input/Output (I/O) means for data exchange with at least 
one peripheral device to be connected to said I/O means, said transaction between said second 
and third processing devices involves exchange of trusted data between said first and second 
processing devices, said first processing device being configured to_fef-providetftg control data to 
fer-settmg said data transfer device in the a-secure mode of operation and said third processing 
device is configured to fer-enablemg a transaction between said I/O means and said third 
processing device after said trusted data have been successfully exchanged. 

23. (Original) A transaction system according to claim 20 wherein said 
transaction entity is a telecommunication service provider. 

24. (Original) A transaction system according to claim 20, comprising a 
plurality of first, second and third processing devices wherein said data network is a public data 
network, such as the Internet. 
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25. (Original) A first processing device configured for operating in 
accordance with claim 18. 

26. (Original) A second processing device configured for operating in 
accordance with claim 18. 

27. (Original) A third processing device configured for operating in 
accordance with claim 20. 

28. (Currently Amended) A method of exchanging data with a data 
processing system using a data transfer device having a_first data interface means for exchanging 
data with said data processing system, a_second data interface mean s for exchanging data with a 
user of said data transfer device, and a_control unit means for controlling data transfer between 
said first and second data interfaces means in one of an open mode and a secure mode of 
operation , said method comprising the 3tcp3 of : 

transferring control data from said data processing system to said data transfer 
device, the control data being associated with an application to be processed by the data 
processing system; and 

performing an authentication check on the control data to set the data transfer 
device in either one of the open and the secure modes of operatio n sclcctivcly enabling exchange 
of data between 3aid first and 3ccond data interface means . 

29. (Cancelled) 

30. (Currently Amended) A method according to claim 29 wherein said 
control data comprise certificate data, wherein said control data being checked by said control 
unit means-with respect to said certificate data, and wherein said data transfer device is set in its 
secure mode of operation if said certificate data of said control data are approved and said data 
transfer device is set in its open mode of operation for either one of disapproval of said 
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certificate data and non-availability of certificate data of said control data, said control data being 
deleted if said certificate data thereof are false. 

31. (Currently Amended) A method according to claim 30 wherein said data 
transfer device in its open mode of operation exchanges data with said second data interface 
means-through a limited number of data input means thereof, including a^data card reade r means , 
whereas the data transfer device in its secure mode of operation exchanges data with said second 
data interface means-through a plurality of data input and output devices thereof, including 
keypad unit mcan3 , display unit mcan3 , card reader unit mcans , and Input/Output (I/O) unit means 
for data exchange with at least one peripheral device to be connected to said I/O unit mcans . 

32. (Currently Amended) A method according to claim 28 wherein data 
provided by said first and second data processing means-are processed in accordance with 
program execution data of a program executed by said data processing system, said program 
execution data being comprised by said control data. 

33. (Currently Amended) A method according to claim 31 wherein said I/O 
means arc unit is enabled and disabled under control of program execution data of a program 
executed by said data processing system, said program execution data being comprised by said 
control data. 

34. (Currently Amended) A method according to claim 33 wherein said 
program execution data are operative in said data transfer device while a data card operatively 
connects to said card reader mcans unit. 



35. (Original) A method according to claim 28 wherein data between said 
data processing system and said data transfer device are exchanged in an encrypted form. 
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36. (Original) A method according to claim 28 wherein control data in said 
data transfer device are erased after the completion of a data exchange. 

37. (Currently Amended) An Application Specific Integrated Circuit (ASIC) 
device comprising data exchange means and control means for selectively enabling data 
exchange between first and second data interfaces means b ased on control data in accordance 
with claim 1 . 

38. (Currently Amended) An ASIC device according to claim 37, further 
comprising at least one of said first and second data interfaces-means. 

39. (Currently Amended) An ASIC device according to claim 37, further 
comprising^ data processing unit to means for processing data provided by said first and second 
data interfaces mcan3 in accordance with program execution data provided by said control data. 

40. (Currently Amended) An ASIC device according to claim 37, further 
comprising ajiata storage unit means , among others to fe^storeing said control data, said 
program execution data and authentication data. 
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